Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
File: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft (raw, json)
Hash identifier: xcTkKrbyEzZYY4pWfTKIqD2lQ8nBz9Mtmk4L5lmCYsM=
Subject key identifier: 96:89:79:02:5A:7D:30:14:DA:70:FA:07:1A:37:61:0B:E9:77:27:80
Authority key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
Certificate issuer: /CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Certificate serial: 019D29975C4B0A7278626784D1915A3D1D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
Manifest number: 1162
Signing time: Thu 26 Mar 2026 10:01:18 +0000
Manifest this update: Thu 26 Mar 2026 10:01:18 +0000
Manifest next update: Fri 27 Mar 2026 10:01:18 +0000
Files and hashes: 1: 6biWQQnc0CHW4mM9TF1Zeg3Rxuc.roa (hash: Pat5YGIm4+fu7xYnIi8/71KV0EL/f5Y/ZCFPyi82ugo=)
2: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl (hash: tQrbp2QGVbkW6LRIi7MiQspDwukcBq9m2ntNfWqlFNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:5c:4b:0a:72:78:62:67:84:d1:91:5a:3d:1d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Validity
Not Before: Mar 26 10:01:18 2026 GMT
Not After : Mar 27 10:01:18 2026 GMT
Subject: CN=968979025a7d3014da70fa071a37610be9772780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:9d:4f:61:aa:97:f0:24:22:cf:dc:95:c5:
5a:7f:e0:6e:db:bb:ba:84:da:51:45:02:57:58:2b:
2a:81:71:97:b0:8f:2b:b0:39:a8:fb:00:54:66:79:
9f:2f:0d:e2:1b:33:f1:fa:1a:4f:31:7e:00:51:a2:
05:5a:42:4d:ad:d8:6b:fd:9f:96:e2:3c:ce:89:9f:
da:85:bb:80:cb:0b:9b:ec:9f:61:0b:f8:0f:29:7f:
77:6e:38:ba:ba:c4:55:11:53:5c:4d:f1:87:c3:94:
52:dc:69:8a:f2:ba:8f:ee:ca:af:65:4c:d4:f3:cb:
61:ff:4f:32:df:fa:53:e4:64:66:05:3d:ed:f6:e3:
7f:f6:07:2a:a5:12:5f:32:5c:6d:1e:e1:88:8f:00:
f8:52:98:2e:51:9f:a1:87:42:02:dd:e3:a3:3d:9f:
b8:0e:aa:e6:ed:f2:a4:1d:3d:5a:95:61:a8:f0:84:
fe:60:d7:c1:3e:d1:95:50:6f:96:dd:b0:1a:44:0e:
e2:b7:1f:2f:4e:c4:6c:57:2b:21:52:a0:24:fa:43:
7f:4a:ae:ed:f5:fa:c5:0e:1c:80:ef:d0:a2:b8:64:
ba:f9:54:9a:62:3b:5d:31:b0:89:90:a4:fd:2c:38:
da:6b:a1:94:75:c4:05:f7:c5:6b:ec:59:79:ec:e5:
10:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:89:79:02:5A:7D:30:14:DA:70:FA:07:1A:37:61:0B:E9:77:27:80
X509v3 Authority Key Identifier:
keyid:5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2d:1a:2a:1e:86:1a:26:8f:ab:41:ce:36:8e:4a:d8:7d:33:
47:e6:0e:41:6a:b2:82:ff:f1:e4:d1:f7:3c:49:04:2f:2d:b6:
e5:53:37:28:85:9f:53:07:79:29:d9:01:cc:8d:0c:3f:d2:66:
f1:96:f5:55:47:c5:97:7c:3d:d1:c6:73:18:1b:5f:ed:2a:7d:
bd:95:c2:b2:b9:bd:91:cb:0e:7c:cd:7e:30:c8:34:4f:3c:82:
a6:fa:a8:83:9d:b4:4a:21:15:d5:75:eb:c1:c5:78:67:28:a2:
4a:ad:4a:79:2a:57:ef:ee:b1:7c:cc:ac:dd:26:dd:05:ef:b1:
1f:85:97:3f:50:67:84:ce:36:50:b4:d2:dd:d4:8e:82:2d:26:
4e:ee:7f:93:a7:52:fe:eb:f7:91:02:24:61:25:e3:8c:75:f0:
97:35:56:76:fd:b4:0a:a3:85:14:c4:ab:0f:b3:5d:77:8a:2d:
3d:e0:57:17:f2:36:61:7c:30:cb:95:34:98:4b:d1:0e:47:08:
b2:a1:6f:89:82:86:64:b8:3a:4c:70:ed:23:4e:f9:90:7d:f7:
6a:e2:f8:5a:5c:35:c8:60:97:da:73:cd:38:09:65:53:5d:18:
b0:53:5c:e4:36:78:4d:cc:80:29:65:5d:ca:32:28:c4:4c:bd:
ee:87:e7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:15:07 2026 by rpki-client